General

  • Target

    d3c80824e3a17165f61257b907878f54dd64feee916a604f7ba82acc99412a1aN.exe

  • Size

    74KB

  • Sample

    250120-nzcctsxnet

  • MD5

    738f995c49da573897cb2f5eb2d58c60

  • SHA1

    d36185639019ccb8ccc20f3bb8b75f83c986fdc7

  • SHA256

    d3c80824e3a17165f61257b907878f54dd64feee916a604f7ba82acc99412a1a

  • SHA512

    cf7fe64c73b6bd1250b6e6416b11964059dd02e81bc6ecc0ec4bdc5bd0b48929bbae6b62adc7be57479f26de18d6cc6cabba7e4bd63b8e6dcccf6c22a1038f17

  • SSDEEP

    1536:4UUPcxVteCW7PMVOk8eFIzL1bk/VCqQzcaLVclN:4UmcxV4x7PMVt8L1bkzQLBY

Malware Config

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

C2

127.0.0.1:6565

Mutex

vzivnulomxoj

Attributes
  • delay

    1

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      d3c80824e3a17165f61257b907878f54dd64feee916a604f7ba82acc99412a1aN.exe

    • Size

      74KB

    • MD5

      738f995c49da573897cb2f5eb2d58c60

    • SHA1

      d36185639019ccb8ccc20f3bb8b75f83c986fdc7

    • SHA256

      d3c80824e3a17165f61257b907878f54dd64feee916a604f7ba82acc99412a1a

    • SHA512

      cf7fe64c73b6bd1250b6e6416b11964059dd02e81bc6ecc0ec4bdc5bd0b48929bbae6b62adc7be57479f26de18d6cc6cabba7e4bd63b8e6dcccf6c22a1038f17

    • SSDEEP

      1536:4UUPcxVteCW7PMVOk8eFIzL1bk/VCqQzcaLVclN:4UmcxV4x7PMVt8L1bkzQLBY

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Asyncrat family

    • VenomRAT

      Detects VenomRAT.

    • Venomrat family

MITRE ATT&CK Matrix

Tasks